feat: add AI provider schema expansion (#25412)

coderd/database/queries/user_ai_provider_keys.sql

@@ -0,0 +1,100 @@
+-- name: GetUserAIProviderKeyByProviderID :one
+SELECT
+    *
+FROM
+    user_ai_provider_keys
+WHERE
+    user_id = @user_id::uuid
+    AND ai_provider_id = @ai_provider_id::uuid;
+
+-- name: GetUserAIProviderKeysByUserID :many
+SELECT
+    *
+FROM
+    user_ai_provider_keys
+WHERE
+    user_id = @user_id::uuid
+ORDER BY
+    ai_provider_id ASC,
+    created_at ASC,
+    id ASC;
+
+-- GetUserAIProviderKeys is used by dbcrypt key rotation. Request paths should use
+-- user-scoped lookups instead of this bulk accessor.
+-- name: GetUserAIProviderKeys :many
+SELECT
+    *
+FROM
+    user_ai_provider_keys
+ORDER BY
+    user_id ASC,
+    ai_provider_id ASC,
+    created_at ASC,
+    id ASC;
+
+-- UpsertUserAIProviderKey preserves the original id and created_at when the
+-- user/provider pair already exists. On conflict, callers provide id and
+-- created_at for the insert path only.
+-- name: UpsertUserAIProviderKey :one
+INSERT INTO user_ai_provider_keys (
+    id,
+    user_id,
+    ai_provider_id,
+    api_key,
+    api_key_key_id,
+    created_at,
+    updated_at
+) VALUES (
+    @id::uuid,
+    @user_id::uuid,
+    @ai_provider_id::uuid,
+    @api_key::text,
+    sqlc.narg('api_key_key_id')::text,
+    @created_at::timestamptz,
+    @updated_at::timestamptz
+)
+ON CONFLICT (user_id, ai_provider_id) DO UPDATE
+SET
+    api_key = EXCLUDED.api_key,
+    api_key_key_id = EXCLUDED.api_key_key_id,
+    updated_at = EXCLUDED.updated_at
+RETURNING
+    *;
+
+-- name: UpdateUserAIProviderKey :one
+UPDATE
+    user_ai_provider_keys
+SET
+    api_key = @api_key::text,
+    api_key_key_id = sqlc.narg('api_key_key_id')::text,
+    updated_at = NOW()
+WHERE
+    user_id = @user_id::uuid
+    AND ai_provider_id = @ai_provider_id::uuid
+RETURNING
+    *;
+
+-- name: DeleteUserAIProviderKey :exec
+DELETE FROM
+    user_ai_provider_keys
+WHERE
+    user_id = @user_id::uuid
+    AND ai_provider_id = @ai_provider_id::uuid;
+
+-- name: DeleteUserAIProviderKeysByProviderID :exec
+DELETE FROM
+    user_ai_provider_keys
+WHERE
+    ai_provider_id = @ai_provider_id::uuid;
+
+-- name: UpdateEncryptedUserAIProviderKey :one
+UPDATE
+    user_ai_provider_keys
+SET
+    api_key = @api_key::text,
+    api_key_key_id = sqlc.narg('api_key_key_id')::text,
+    updated_at = NOW()
+WHERE
+    id = @id::uuid
+RETURNING
+    *;